An issue was discovered in Lantronix EDS5000 2.1.0.0R3.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 11, 2026 · NIST NVD

   Detected

   An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of input parameters. An attacker can inject arbitrary commands in delete actions of various objects, such as server keys, users, and known hosts. Commands are executed with root privileges.

2. Sep 4, 2026 · NIST NVD

   Updated

   An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of input parameters. An attacker can inject arbitrary commands in delete actions of various objects, such as server keys, users, and known hosts. Commands are executed with root privileges.

Affected

• cpe lantronix/eds5008 firmware2.1.0.0r3
• cpe lantronix/eds5016 firmware2.1.0.0r3
• cpe lantronix/eds5032 firmware2.1.0.0r3

Sources

• NIST NVDVulnerability recordCVE-2025-67035

  An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of input parameters. An attacker can inject arbitrary commands in delete actions of various objects, such

  nvd.nist.gov

References

• Reference · github.com
• Third Party Advisory · cisa.gov
• Reference · lantronix.com